Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/c2gmF7vgLCtdxNTt65Rjx9Jx4Fo.roa
File: c2gmF7vgLCtdxNTt65Rjx9Jx4Fo.roa (raw, json)
Hash identifier: 63SbpIpJUmONyQByvpMgrMLLacQ0T5QOJKOBeR18PIA=
Subject key identifier: 73:68:26:17:BB:E0:2C:2B:5D:C4:D4:ED:EB:94:63:C7:D2:71:E0:5A
Certificate issuer: /CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Certificate serial: 034D2B
Authority key identifier: 63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/c2gmF7vgLCtdxNTt65Rjx9Jx4Fo.roa
Signing time: Fri 27 May 2022 09:43:14 +0000
ROA not before: Fri 27 May 2022 09:43:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8586
IP address blocks: 178.16.238.0/24 maxlen: 24
178.16.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216363 (0x34d2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Validity
Not Before: May 27 09:43:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73682617bbe02c2b5dc4d4edeb9463c7d271e05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:37:58:5c:b2:04:27:75:f9:57:11:0d:05:f0:
0c:4d:ce:74:64:10:c5:cc:c6:2a:d5:0c:6c:94:17:
f2:89:75:d8:9f:ea:23:ed:7b:89:4d:f6:05:48:73:
0f:fb:06:be:ba:c1:0e:7a:f0:87:3f:af:8c:64:87:
74:e8:ea:99:eb:ef:16:65:b5:aa:f4:59:38:a6:70:
78:0e:9f:cd:ee:33:ea:c7:06:fb:67:05:ff:6a:93:
b5:eb:08:2b:ba:80:10:96:59:34:6a:2c:1a:c8:04:
4c:f0:9f:c0:20:85:70:a2:fc:b0:b8:fb:ea:6d:51:
41:b4:fa:ff:3b:86:73:45:77:73:46:26:0f:df:0d:
d8:3d:df:a9:1e:f4:a4:20:73:05:51:20:37:33:c2:
44:07:e0:6d:91:ec:60:d7:e2:0a:f9:60:72:b2:54:
90:a9:50:fa:dc:b0:fe:02:af:6f:d0:97:a0:80:b3:
1e:9b:0a:3b:cb:c9:b5:3f:cd:d8:de:db:2a:63:dd:
d0:d9:a6:4b:a7:6c:60:c7:e1:85:07:26:13:8c:cd:
59:d7:f3:d2:cb:07:ae:bc:8f:ac:2a:26:a2:52:47:
5a:63:a7:ff:5a:a1:b9:6c:5c:17:e1:d2:01:7c:6d:
6f:d5:51:ce:14:c5:5a:ae:e2:63:09:ad:b0:94:16:
49:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:68:26:17:BB:E0:2C:2B:5D:C4:D4:ED:EB:94:63:C7:D2:71:E0:5A
X509v3 Authority Key Identifier:
keyid:63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/c2gmF7vgLCtdxNTt65Rjx9Jx4Fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.238.0/23
Signature Algorithm: sha256WithRSAEncryption
00:6a:27:d5:9b:8f:e2:d4:b8:66:03:11:eb:16:5f:fe:1a:46:
03:c2:08:00:54:3d:4c:ea:aa:c9:11:8f:78:8c:65:78:2d:b1:
cc:0a:1c:4a:41:f4:41:46:f4:46:df:43:9a:06:76:44:c4:64:
52:11:d4:22:eb:a1:d5:e0:c1:55:26:b5:3e:78:aa:b6:ec:9c:
7f:af:3f:e5:97:11:18:df:70:3c:50:a7:37:cc:10:bd:3c:e4:
80:40:4e:3d:a8:7e:48:02:ff:91:8e:a9:5e:99:1d:f6:f7:58:
89:ff:fb:d6:a2:b3:12:55:72:7d:e0:40:46:e7:a3:5c:20:83:
89:b8:7d:01:76:8f:29:a4:22:90:26:78:58:71:e0:54:a2:4d:
c3:7f:97:eb:48:bf:e6:c2:6e:bf:19:9b:9a:1f:61:a2:a0:e5:
c5:ac:04:99:3f:e0:83:bd:4b:0e:96:11:f6:26:81:ee:9a:de:
35:67:5d:6a:8d:39:db:73:80:10:8b:85:54:c9:ad:87:d5:27:
6d:62:8b:22:09:2e:6e:25:a1:52:2f:ad:0b:ec:9b:82:6f:5a:
a0:bd:3e:cf:cf:56:b2:ee:49:3f:d1:9e:14:42:aa:d0:d8:41:
c2:77:ca:99:5f:88:9b:9e:ca:2a:9b:16:21:00:eb:a2:44:2f:
ee:da:3a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:08 2024 by rpki-client on console-fra.rpki-client.org